last executing test programs: 30m34.075803862s ago: executing program 32 (id=132): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b791312252f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e745", 0x313, 0x6d91fb6102d8d9cc, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="935645bc525648", 0x7, 0x4008004, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) 30m19.423598044s ago: executing program 33 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x8, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 28m22.866347907s ago: executing program 34 (id=405): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 28m14.430898352s ago: executing program 1 (id=431): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa8042, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) 28m13.428658898s ago: executing program 1 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007800800"], 0x6c}}, 0x0) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 28m12.289380813s ago: executing program 1 (id=437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x156, 0x4010, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000005004000000000000000000000ffff7f00000100000400000000000a006000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 28m11.088017063s ago: executing program 1 (id=442): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 28m10.636091031s ago: executing program 1 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 28m1.746028598s ago: executing program 1 (id=460): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000) 27m59.95527369s ago: executing program 35 (id=460): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000) 22m46.573234784s ago: executing program 36 (id=1115): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x3, 0x5, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b480)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r2, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 12m27.366154676s ago: executing program 37 (id=2157): syz_emit_ethernet(0x305, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000140)={0x10, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x3, 0x0, 0x0, 0x7, 0x46, &(0x7f0000000180)="337eb29c7772e443264d1e8f100c4dff8dc1b7b144731ce2711c11457ec76bde9c5ddfbea0874a5140fac8627ca1cde80ca96ae0447e690f37f7cc3f3e20c728ed31cb0b75a2"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'macvtap0\x00', @broadcast}) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1}, 0x1c) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) 12m12.228385084s ago: executing program 0 (id=2205): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) gettid() r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000040)='5\x00', 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x6}, 0xff}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) 12m8.383744255s ago: executing program 0 (id=2211): memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x2, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000540)={0x0, [[0x9, 0x101, 0x0, 0x0, 0x0, 0x3, 0x1, 0xf], [0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x840f, 0x0, 0x6], [0xfff, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x4575]], '\x00', [{0x0, 0x1, 0x1}, {}, {0x80}, {0x9e, 0x4}, {0x0, 0xb}, {}, {}, {}, {}, {0x4000000}, {0x0, 0x4}], '\x00', 0xd, 0x0, 0x0, 0x0, 0x0, 0x5000000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) close_range(r1, r3, 0x0) 12m7.312980545s ago: executing program 0 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r3, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x153000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000140)={0x0, 0x1, 0x0, {0x0, 0xd}, 0x9, 0x80000000}) r5 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4421, &(0x7f0000008940)="$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") syz_emit_ethernet(0x74, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3e, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1b"}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x2, 0x0, &(0x7f0000000280)=0xfffffffffffffe70) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) 12m2.332063161s ago: executing program 0 (id=2221): r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 12m0.063843808s ago: executing program 0 (id=2225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 11m57.380344345s ago: executing program 0 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0xfffffffe, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x6, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x6, 0x6}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x1c) 11m47.67228495s ago: executing program 7 (id=2242): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) gettid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(r0, 0x5) setsockopt(0xffffffffffffffff, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m45.844038757s ago: executing program 7 (id=2243): open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, r0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11m41.770581261s ago: executing program 38 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0xfffffffe, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x6, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0xe0000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x1, 0x6, 0x6}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x1c) 11m35.65200639s ago: executing program 7 (id=2257): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 11m31.910836631s ago: executing program 7 (id=2263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, 0x0, 0x40084) dup(0xffffffffffffffff) syz_socket_connect_nvme_tcp() syz_clone(0x680d1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) ioprio_get$uid(0x3, 0x0) 11m27.291449945s ago: executing program 7 (id=2267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x8000, 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(0x0, 0xffffffff, 0x200000) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2000000000000}, 0x18) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x40404) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) 11m25.31082838s ago: executing program 7 (id=2273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8c781) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1f, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 11m9.40960601s ago: executing program 39 (id=2273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8c781) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1f, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 3m6.832278247s ago: executing program 9 (id=2971): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) gettid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r4, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m5.764064317s ago: executing program 9 (id=2972): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xbcaf, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006600), 0x0, 0x2, 0x0) 3m4.433064853s ago: executing program 9 (id=2975): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x2800) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f00000003c0)={0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m2.034267857s ago: executing program 9 (id=2977): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setfsuid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xb110f000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @random="1d5da714014b", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x6e21, 0x18, 0x0, @wg=@data}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x3, 0x20980903, 0x7}) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3m0.107743259s ago: executing program 9 (id=2980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4096}, 0x1008, 0x3, 0x5800) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) timer_create(0x4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x32) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x10100, 0x80) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m56.317894484s ago: executing program 9 (id=2985): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x97}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_rsp={{0x13, 0x6}, {0x8}}}}, 0x9c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) gettid() pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r3}, 0x50) 2m40.328795361s ago: executing program 40 (id=2985): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x97}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_rsp={{0x13, 0x6}, {0x8}}}}, 0x9c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) gettid() pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r3}, 0x50) 2m29.111370754s ago: executing program 2 (id=3017): syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x51c, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r4 = userfaultfd(0x1) r5 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)={0x30000010}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) r9 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 2m27.739668957s ago: executing program 2 (id=3019): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='svcrdma_wc_read\x00', 0xffffffffffffffff, 0x0, 0x75c9b4fa}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r3, &(0x7f0000000300)={'syz1\x00', {}, 0x0, [0x80000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x87, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000000, 0x4000, 0xfffffffe, 0x0, 0x80000000], [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xa10, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8005], [0x0, 0x2, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9b9, 0x10009, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2m26.56702901s ago: executing program 2 (id=3021): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='btrfs_flush_space\x00', r1, 0x0, 0x1000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) ioperm(0x1, 0x9, 0xfffffffffffffff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000800)=""/169, 0xa9}, {&(0x7f00000008c0)=""/213, 0xd5}], 0x6}, 0x2}, {{&(0x7f0000000b00)=@tipc, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/18, 0x12}, {&(0x7f0000000bc0)=""/187, 0xbb}, {0x0}, {&(0x7f0000000d80)=""/88, 0x58}], 0x4, &(0x7f0000000e40)}, 0x7}], 0x2, 0x40000142, &(0x7f0000000f00)) shmctl$IPC_RMID(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) set_mempolicy(0x8000, &(0x7f0000000340)=0x80000000000006, 0x3873) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m25.640746694s ago: executing program 2 (id=3022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 2m24.579050376s ago: executing program 2 (id=3024): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000800), &(0x7f0000000940)='%pS \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) 2m23.561803452s ago: executing program 2 (id=3026): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x2000809, &(0x7f0000000000)=ANY=[], 0x0, 0x223, &(0x7f0000000800)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(&(0x7f00000011c0)=""/201) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m8.275117875s ago: executing program 41 (id=3026): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x2000809, &(0x7f0000000000)=ANY=[], 0x0, 0x223, &(0x7f0000000800)="$eJzsmbFrFEEUxr/ZW3dzh4g2FjYpPDBCsre7iZJGUEGsBCGKWh5mE85McnK5IjkQEmxsrEWIpf+AgkUaGzs7QSy0UEEQNKVgERiZ2dnb2b3d84RTkLwf3Nu3b97Mm5md/YpbEARxYPn86cfHhxfnr00DOIw6XB3/WklzLCP/w2MhgEs7z94/fbV2/t5ufrwJAGJ/cuT6R6W54Ej7tqi9Ls2jbOw6LJzW/g04SXhfKOKbCAy3dMMdw29XtcMj73abLy61eORLE0gTSvPtiFHLBrC3zbCYrE0IwYz29c3eSpPzqJNxamlCvimpX9CrzBmyfVuJc05f5fzk87r54P62vPd03IcV7yWAABYC7c+CYUH783DheV66Jcb6T9jp+PWXRevvH5hRlvT3HPYzPgYycmxm7CUq+JNeT0oOwf/vTL8DshHhZnKGnISqk3ltkjfin02e5SPMrH58b/f1YK8vY6kOhoLz445hZAbOBg7bztzzdm+lqYQLxvO6rHPe1Di/Mvrkt/LK5QzTMtlQVfrBbOCUoU827L5+NLqrdxvrm72Z1mpzOVqO1sJw9qw/5/tnwsZSy4XfUHJUKoA2JpQ+1YzxD5XkOszBRrPb7QQbQLcT9O/D2BqKu/Ci/V31sZT+WZg6GY8hN1kt2y2uwfTPUlfpTVVKJ08QBEEQBEEQBEEQBEEQBPFb0j8jGZsEQ/wJRH2oEiWEV1X+rwAAAP//iclSCw==") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(&(0x7f00000011c0)=""/201) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m34.240516474s ago: executing program 4 (id=3065): r0 = socket(0x2c, 0x80000, 0x3c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x24000040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, 0x0, 0x4810) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4ed8ee5a90e2bf26, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 1m32.347222884s ago: executing program 4 (id=3067): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$netrom(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = mq_open(&(0x7f0000000c00)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xc2\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\xf8\x8e\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x9d\x8b\x12\x19\xab\xb9\xe7h\xfa\x9a\xec\xff>y\x7f(\xf8\xe0\x83\x88\xb0\x98\xfb\xbb\x00\xae\xa9Q\x9e\x04\x88\x9d\xfc\xe3`\x88w\xb0\"\xef\x10\\\xc1hc\xb3\xa9;(\xady\x17\x92\xf0XfW\x9f\xe5\x04H\xaa\x8b\xf9\x91I\x9c(@\xf3\x8b\xaf!$fI\x9e\xd8\x9d\x15\x87z\xad\x95w\xb8aE\r\x83A7\xe8\xfb\xcf\xa0', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f00000004c0)={0x6, 0xb, 0x3, 0x8000000000}) mq_timedreceive(r3, &(0x7f00000008c0)=""/134, 0x86, 0x3d, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={r2}) 1m30.58296638s ago: executing program 4 (id=3069): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r4, 0x0, 0x0, 0x0}, 0x30) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 1m29.304291663s ago: executing program 4 (id=3070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32], 0x50) sendto$inet(r7, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r7}, 0x20) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 1m23.528992936s ago: executing program 4 (id=3074): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1812c09}}, 0x50) creat(0x0, 0x8) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x10000}, @timestamp, @window={0x3, 0x1000}, @timestamp], 0x2000000000000113) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000003c0)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000100)=0x60, 0x4) sendto$inet(r3, &(0x7f0000000240)="aabd3db41ddf8ebec494f28dc84697b9db7e47536161308fc0cdaed404e9afe8e2e66d6d5c6e22e37f2a82af2be13f68f08d1c40000000000000004aad4429902542556f6f5656ff1008dd08fe07cd5b7eab1179c9b8f65c28750df23f8cca25d2d94983c6c06ebd24765fa6a428160adefcc7", 0xffffffe2, 0x0, 0x0, 0x1f) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) getsockname$packet(r0, &(0x7f0000000200), &(0x7f0000000300)=0x14) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x8}], 0x1c) readahead(r0, 0x0, 0xff) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m17.534174799s ago: executing program 4 (id=3082): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f000009de40)=0x1022) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 1m1.462018914s ago: executing program 42 (id=3082): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f000009de40)=0x1022) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 40.378728224s ago: executing program 8 (id=3132): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$phonet_pipe(0x23, 0x5, 0x2) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x7, 0x0) read$msr(r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f000009de40)=0x1022) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) socket(0x28, 0x5, 0x0) 38.813282442s ago: executing program 8 (id=3136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 36.377992573s ago: executing program 8 (id=3139): connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, 0x0, 0x0) kexec_load(0x9, 0x0, 0x0, 0x30000) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) unshare(0x20000600) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[], 0x8b, 0x1) 30.079419379s ago: executing program 8 (id=3145): socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x241}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 28.651229429s ago: executing program 8 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000034c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000003640)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB=',discard,errors=continue,errors=continue,\x00', @ANYRES8, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYBLOB="a880643446b31b6a354a1ce925f41cb03cd82d0a2df0cc3407a514f07f667e7f7655f3f551b16cbc8502e52a9c5fb5482449da06953dd084329807295a2e4b63581015f806476097a0fda8b84451b9d54101a1428eec2f0e35be3c6e0b162dc4e380f442a9866f93cd6e500c820d28b8125c0a6d8697cba490cdc0d3d692ad67c8aeb55eeabe704b0028315681766a451f3e7757e8e16d"], 0x1, 0x152d, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x40000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x88) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000406050200002000000000000000000014000780080013400400000008001240000600000500010007"], 0x60}}, 0x0) 24.291676681s ago: executing program 5 (id=3153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2200082, &(0x7f0000000140)=ANY=[], 0xfe, 0x15b, &(0x7f0000000280)="$eJzs0TtrWmEcx/Hvc87jBarYUgtS2ip0qK0UvNBupXhKpULtgZYunQR7egHFECHJqIRsGYSsDrmsIW9Bo0NI0CV5E1ncAhkN5xyTkMtL+H+28/vf4DyfP0zSimufmo2FRafVcn6nvtuV0o/Tfr/o5kEgfKPu9w+K8A/NQMO0A248isKf/3XHqDXr7ve0CCHAejDPacQu71lxTUdDDn8+/RKGT7w+g7uZUyDgzT3VYMX8LAs824JXzLAe+Zm77wwwQang/Nhzk7VyJvlYwUovs7d79G18WH775qOzni91X0cSZgbYxlLhg9HfE3M+NRlXvtoVe1LI598XsjmDd8fewnYX/SWyBL8UaHefgbcvSOKF/gmrCja8W9N9FQWGm+d2I3T1r9vLZgpUslerJgI71fhDAzOt3cqMe3gV7xGEEEIIIYQQQgghhBBCCCGEEEKIWy4CAAD//2EjUXo=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000faff0000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f000089f000/0x1000)=nil, 0x1000, 0x0, 0x55011, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r6 = signalfd4(r1, &(0x7f0000000180), 0x8, 0x80000) getdents(r1, &(0x7f0000000080)=""/43, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x811, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000080)=0x8) openat$cgroup_ro(r6, &(0x7f00000001c0)='memory.events.local\x00', 0x0, 0x0) 21.832304843s ago: executing program 5 (id=3156): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="a0", 0x1}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19.106531859s ago: executing program 8 (id=3160): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x7, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f000009de40)=0x1022) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 19.104519365s ago: executing program 5 (id=3161): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f00000000c0)=ANY=[], 0x1, 0x6ba, &(0x7f0000001400)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5043, &(0x7f00000003c0)={0x0, 0xe, 0x1, 0x0, 0x1cb}, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000006c0)={0x2, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/47, 0x2f}], &(0x7f0000000640)}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) 17.910119938s ago: executing program 6 (id=3163): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f00000000c0)=ANY=[], 0x1, 0x6ba, &(0x7f0000001400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x5043, &(0x7f00000003c0)={0x0, 0xe, 0x1, 0x0, 0x1cb}, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000006c0)={0x2, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/47, 0x2f}], &(0x7f0000000640)}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) 15.838567524s ago: executing program 5 (id=3165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000c00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, @null}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_pts(r5, 0x141601) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x102800) r8 = shmget(0x3, 0x3000, 0x78001622, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r8, 0x0) 12.630867414s ago: executing program 6 (id=3166): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000940)="0102", 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 12.628683092s ago: executing program 5 (id=3167): r0 = socket(0x6, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0x0, 0x5}, 0xfd}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfc5e) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50) 10.193909101s ago: executing program 6 (id=3170): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r6, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=@ng={0x4, 0xd}, 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 8.781055424s ago: executing program 5 (id=3172): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00'}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x2204008, &(0x7f0000000d00)=ANY=[]) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e53ab84ae67f1ecfdeff83f89f93aa8f260c31420cf8e2b249e23e722d95c9bd3cec979de43bf4bf01c5d39ac48420906069f275a718f256f6d68ef", 0x3f) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000380)=0x103e, 0x4) syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x400000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xe7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x0, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) 7.44835392s ago: executing program 3 (id=3173): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) inotify_init() r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) setresuid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) 7.431966973s ago: executing program 6 (id=3174): mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) socket$inet(0x2, 0x6, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x19, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0xffffffffdfffefff, 0x9) openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x7, 0x303, 0x100}}) 6.043380607s ago: executing program 3 (id=3175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10080, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x6, 0x6ac, &(0x7f0000001980)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[0x0]}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) 5.617183661s ago: executing program 6 (id=3176): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f00000000c0)=ANY=[], 0x1, 0x6ba, &(0x7f0000001400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x5043, &(0x7f00000003c0)={0x0, 0xe, 0x1, 0x0, 0x1cb}, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000006c0)={0x2, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/47, 0x2f}], &(0x7f0000000640)}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) 4.388032228s ago: executing program 3 (id=3177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x3) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) setpgid(r2, 0x0) setpgid(0x0, r2) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, &(0x7f0000000540)={[{@pids_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@pids_localevents}], [{@fowner_lt}, {@fowner_eq}, {@audit}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'syzkaller\x00'}}]}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 3.105305788s ago: executing program 43 (id=3160): sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4d92, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x7, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f000009de40)=0x1022) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 3.066441345s ago: executing program 6 (id=3179): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2404c081}, 0x8000) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r8 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r8}, &(0x7f0000000080)) read$FUSE(r7, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(0x0) sendfile(r5, r4, 0x0, 0x80008) 2.904893085s ago: executing program 3 (id=3180): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.633456215s ago: executing program 3 (id=3181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpgid(0x0) kcmp(r6, r6, 0x5, r5, r4) madvise(&(0x7f00003a6000/0x3000)=nil, 0x3000, 0x14) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x2100, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 0s ago: executing program 3 (id=3182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000240)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) socket(0x10, 0x3, 0xfffffffe) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x200040a, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f726c3d6b6f6e74695a75652c7a65726f5f73697a655f6469722c756d61736b3d30303030303030303030303038303030303030303030332c6701003d", @ANYBLOB="baf91243bae981072c68dcab16c0f780a933d940de2db42e84b4f36c23281358c5d6ef7ee34d7116128812318908ef0c1a029f4d9dafc382e5b8648f68c0f4f45956687eb0ee1d07fb446c7f62b63bcaa9647b7786ef7b55e7ae5596ee4f42ae2dcabde508b6eb95ec162f2a55eeb6d74a4488591d91740b0c7930d1703c4f7f1216050f910a629b4b923aafde091439102f4583", @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c646d61736b3d30303036af3030303030303030303030303030303030302c696f636861727365743d6d616363726f617479616e2c00"], 0x0, 0x152b, &(0x7f00000054c0)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dmmidi(&(0x7f0000000580), 0x15, 0x410002) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000600), 0x0, 0x6c, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0xd, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0xfffffffffffffffd, 0x7fff}}}, 0x118) kernel console output (not intermixed with test programs): 67][T18796] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 1702.428912][T18811] loop4: detected capacity change from 0 to 1024 [ 1703.396308][T18820] hfsplus: xattr searching failed [ 1703.587133][T18808] loop9: detected capacity change from 0 to 128 [ 1703.600612][ T30] audit: type=1800 audit(1745043524.637:556): pid=18820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2840" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1703.607911][T18808] vfat: Bad value for 'uid' [ 1703.625596][T18808] vfat: Bad value for 'uid' [ 1705.187900][T18829] loop4: detected capacity change from 0 to 128 [ 1705.277382][T18829] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1705.335437][T18829] ext4 filesystem being mounted at /678/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.636267][T18574] hsr_slave_0: entered promiscuous mode [ 1706.160950][T18574] hsr_slave_1: entered promiscuous mode [ 1706.189816][T18574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1706.219614][T18574] Cannot create hsr debugfs directory [ 1706.409100][ T6798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1708.443164][T18855] loop4: detected capacity change from 0 to 40427 [ 1708.477397][T18855] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1708.485309][T18855] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1708.507323][T18855] F2FS-fs (loop4): invalid crc value [ 1708.677234][T18855] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1708.684420][T18855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1711.557848][T18883] xt_hashlimit: max too large, truncated to 1048576 [ 1711.602480][T18883] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1711.773126][T18716] chnl_net:caif_netlink_parms(): no params data found [ 1712.533467][T18893] loop9: detected capacity change from 0 to 128 [ 1712.565593][T18893] vfat: Bad value for 'uid' [ 1712.570854][T18893] vfat: Bad value for 'uid' [ 1712.998836][T18900] loop4: detected capacity change from 0 to 1024 [ 1714.001204][T18910] loop9: detected capacity change from 0 to 512 [ 1714.008469][T18910] EXT4-fs: Ignoring removed nobh option [ 1714.015536][T18910] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1714.715863][T18915] hfsplus: xattr searching failed [ 1714.725503][ T30] audit: type=1800 audit(1745043535.957:557): pid=18915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2851" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1715.198519][T18910] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1715.462255][T18716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.514137][T18716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.570009][T18716] bridge_slave_0: entered allmulticast mode [ 1715.599834][T18716] bridge_slave_0: entered promiscuous mode [ 1715.620591][T18716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.649655][T18716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.656955][T18716] bridge_slave_1: entered allmulticast mode [ 1715.674931][T18716] bridge_slave_1: entered promiscuous mode [ 1715.843614][T18932] loop9: detected capacity change from 0 to 128 [ 1716.284510][T18938] loop4: detected capacity change from 0 to 512 [ 1716.298411][T18938] EXT4-fs: Ignoring removed nobh option [ 1716.365184][T18938] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1716.745819][T18932] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1716.858805][T18932] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.888617][T18716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.937045][T18716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1717.199730][T18938] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1718.463953][T14971] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1722.001076][T18118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1722.012368][T18716] team0: Port device team_slave_0 added [ 1722.039203][T18118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1722.090355][T12351] bridge_slave_1: left allmulticast mode [ 1722.149656][T18118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1722.180511][T12351] bridge_slave_1: left promiscuous mode [ 1722.197526][T18118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1722.206826][T18118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1722.231741][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.471431][T12351] bridge_slave_0: left allmulticast mode [ 1722.537507][T12351] bridge_slave_0: left promiscuous mode [ 1722.573342][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.235796][T18985] overlayfs: failed to clone lowerpath [ 1723.339927][T18986] overlayfs: failed to clone upperpath [ 1724.207620][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.267455][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.319651][ T5849] Bluetooth: hci6: command tx timeout [ 1724.341215][T12351] bond0 (unregistering): Released all slaves [ 1725.301643][T18996] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1725.313756][T18996] cramfs: wrong magic [ 1725.321342][T18997] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1725.331910][T18997] cramfs: wrong magic [ 1725.356337][T18996] tmpfs: Bad value for 'size' [ 1725.721251][T18716] team0: Port device team_slave_1 added [ 1727.289915][ T5849] Bluetooth: hci6: command tx timeout [ 1727.998082][T19012] loop4: detected capacity change from 0 to 512 [ 1728.005511][T19012] EXT4-fs: Ignoring removed nobh option [ 1728.758150][T19012] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1728.965995][T12351] hsr_slave_0: left promiscuous mode [ 1728.975583][T12351] hsr_slave_1: left promiscuous mode [ 1728.981968][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.002078][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.094918][T19012] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1729.125555][T19018] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2870'. [ 1729.376318][ T5849] Bluetooth: hci6: command tx timeout [ 1729.809494][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.817831][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.759772][T19028] loop4: detected capacity change from 0 to 64 [ 1731.158594][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1731.219377][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1731.428911][ T5849] Bluetooth: hci6: command tx timeout [ 1731.552146][T19031] loop4: detected capacity change from 0 to 128 [ 1731.599854][T19031] vfat: Bad value for 'uid' [ 1731.604586][T19031] vfat: Bad value for 'uid' [ 1732.056396][T18716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.063592][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.101491][T18716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.123980][T19025] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1732.325459][T18716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.369696][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.403361][T18716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.882607][T18716] hsr_slave_0: entered promiscuous mode [ 1732.941546][T18716] hsr_slave_1: entered promiscuous mode [ 1733.247046][T19051] loop9: detected capacity change from 0 to 4096 [ 1735.477056][T19077] loop9: detected capacity change from 0 to 128 [ 1735.601678][T19077] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1735.650070][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1735.661014][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1735.668911][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1735.678061][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1735.686644][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1735.740478][T19077] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1736.436297][ T5847] Bluetooth: hci6: command 0x0405 tx timeout [ 1737.731538][ T5847] Bluetooth: hci1: command tx timeout [ 1738.037326][T14971] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1738.959486][T19112] loop9: detected capacity change from 0 to 64 [ 1739.646762][T18972] chnl_net:caif_netlink_parms(): no params data found [ 1739.820532][ T5847] Bluetooth: hci1: command tx timeout [ 1740.811642][T19124] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2885'. [ 1741.899889][ T5847] Bluetooth: hci1: command tx timeout [ 1741.985187][T19144] loop9: detected capacity change from 0 to 64 [ 1742.045076][T19144] hfs: unable to open extent tree [ 1742.051152][T19144] hfs: can't find a HFS filesystem on dev loop9 [ 1742.780041][T19149] loop9: detected capacity change from 0 to 128 [ 1742.818288][T19149] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1742.847433][T19149] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.157439][T18972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.176814][T18972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.943725][T19163] loop4: detected capacity change from 0 to 128 [ 1744.066793][ T5847] Bluetooth: hci1: command tx timeout [ 1744.159858][T18972] bridge_slave_0: entered allmulticast mode [ 1744.179625][T18972] bridge_slave_0: entered promiscuous mode [ 1744.469045][T19163] affs: No valid root block on device loop4 [ 1744.504167][T19163] tmpfs: Unknown parameter 'í^f' [ 1744.865514][T14971] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1744.979760][T19080] chnl_net:caif_netlink_parms(): no params data found [ 1745.082255][T18972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.091168][T18972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.098438][T18972] bridge_slave_1: entered allmulticast mode [ 1745.113545][T18972] bridge_slave_1: entered promiscuous mode [ 1745.548642][T19172] loop9: detected capacity change from 0 to 512 [ 1745.563479][T19172] EXT4-fs: Ignoring removed nobh option [ 1745.591228][T19172] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1746.287185][T19172] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1746.409349][T18972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.516407][T18972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.525037][T12351] bridge_slave_1: left allmulticast mode [ 1748.550110][T12351] bridge_slave_1: left promiscuous mode [ 1748.555897][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.612181][T12351] bridge_slave_0: left allmulticast mode [ 1748.617983][T12351] bridge_slave_0: left promiscuous mode [ 1748.630154][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.659231][T12351] bridge_slave_1: left allmulticast mode [ 1748.669541][T12351] bridge_slave_1: left promiscuous mode [ 1748.675286][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.718533][T12351] bridge_slave_0: left allmulticast mode [ 1748.724660][T12351] bridge_slave_0: left promiscuous mode [ 1748.731128][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.947418][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.030527][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.109219][T12351] bond0 (unregistering): Released all slaves [ 1752.175938][T19221] loop4: detected capacity change from 0 to 128 [ 1752.202604][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.252637][T19221] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1752.332160][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.356372][T19221] ext4 filesystem being mounted at /694/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1752.387026][T12351] bond0 (unregistering): Released all slaves [ 1752.403839][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1752.609280][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1752.618969][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1752.630077][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1752.757820][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1753.350913][ T6798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1753.505914][T12351] hsr_slave_0: left promiscuous mode [ 1753.534931][T12351] hsr_slave_1: left promiscuous mode [ 1753.543419][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.770311][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.663060][T12351] hsr_slave_0: left promiscuous mode [ 1754.732468][T12351] hsr_slave_1: left promiscuous mode [ 1754.738492][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.767194][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.849787][ T5849] Bluetooth: hci5: command tx timeout [ 1755.577489][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1755.819667][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1756.944302][ T5849] Bluetooth: hci5: command tx timeout [ 1756.952987][T19272] loop9: detected capacity change from 0 to 256 [ 1759.009681][ T5849] Bluetooth: hci5: command tx timeout [ 1759.606407][T19287] loop9: detected capacity change from 0 to 64 [ 1759.675236][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1759.716348][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1760.627466][T18972] team0: Port device team_slave_0 added [ 1761.108709][ T30] audit: type=1326 audit(1745043582.127:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1761.148724][ T5849] Bluetooth: hci5: command tx timeout [ 1761.723490][ T30] audit: type=1326 audit(1745043582.127:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1761.776680][T18972] team0: Port device team_slave_1 added [ 1761.782733][ T30] audit: type=1326 audit(1745043582.137:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1761.782791][ T30] audit: type=1326 audit(1745043582.137:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1761.782844][ T30] audit: type=1326 audit(1745043582.137:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1762.452892][T19310] loop9: detected capacity change from 0 to 128 [ 1762.458888][ T30] audit: type=1326 audit(1745043582.137:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1762.569750][T19310] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1762.608626][ T30] audit: type=1326 audit(1745043582.137:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1762.667649][T19310] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.687518][ T30] audit: type=1326 audit(1745043582.137:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1764.148636][ T30] audit: type=1326 audit(1745043582.147:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1764.827207][T19322] loop4: detected capacity change from 0 to 512 [ 1764.834660][T19322] EXT4-fs: Ignoring removed nobh option [ 1764.911741][T19322] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1765.021322][T14971] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1765.162956][ T30] audit: type=1326 audit(1745043582.147:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.9.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc78e169 code=0x7ffc0000 [ 1765.418689][T18972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.426320][T18972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.542694][T19322] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1765.581757][T18972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.646777][T19080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.677909][T19080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.693890][T19080] bridge_slave_0: entered allmulticast mode [ 1765.705219][T19080] bridge_slave_0: entered promiscuous mode [ 1765.724116][T18972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.742340][T18972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.777792][T18972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.966941][T19080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.979681][T19080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.998524][T19080] bridge_slave_1: entered allmulticast mode [ 1768.171689][T19080] bridge_slave_1: entered promiscuous mode [ 1768.186559][T19344] loop4: detected capacity change from 0 to 4096 [ 1768.904352][T11490] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1769.230691][T19354] loop9: detected capacity change from 0 to 2048 [ 1769.272346][T19354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1769.429835][T19356] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1769.554028][T19354] [syz.9.2919/19354] FS: loop9 File: /file0/memory.swap.current would truncate fibmap result [ 1769.814143][T18972] hsr_slave_0: entered promiscuous mode [ 1769.820875][T18972] hsr_slave_1: entered promiscuous mode [ 1769.828169][T18972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1769.836844][T18972] Cannot create hsr debugfs directory [ 1769.847443][T19080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.024127][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1770.024183][ T30] audit: type=1326 audit(1745043591.177:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1770.331647][ T30] audit: type=1326 audit(1745043591.177:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1770.585164][T19080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.731982][ T30] audit: type=1326 audit(1745043591.187:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1770.755444][ T30] audit: type=1326 audit(1745043591.187:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1770.778596][ T30] audit: type=1326 audit(1745043591.187:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1770.801037][ T30] audit: type=1326 audit(1745043591.187:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1770.907300][ T30] audit: type=1326 audit(1745043591.197:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1771.160134][ T30] audit: type=1326 audit(1745043591.197:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1771.347916][T19378] loop4: detected capacity change from 0 to 512 [ 1771.361742][T19378] EXT4-fs: Ignoring removed nobh option [ 1771.924701][T19378] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1772.022672][ T30] audit: type=1326 audit(1745043591.207:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1772.579863][ T30] audit: type=1326 audit(1745043591.207:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19358 comm="syz.4.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f1f8e169 code=0x7ffc0000 [ 1772.684911][T19080] team0: Port device team_slave_0 added [ 1772.718950][T19080] team0: Port device team_slave_1 added [ 1772.732991][T19378] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1773.746973][T19387] loop9: detected capacity change from 0 to 512 [ 1773.755405][T19387] EXT4-fs: Ignoring removed nobh option [ 1773.761717][T19387] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1773.964328][T19387] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1774.207254][T19080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1774.791635][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.848134][T19080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.988923][T19412] overlayfs: overlapping lowerdir path [ 1776.105614][T19413] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1776.748807][T19080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.768487][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.828289][T19080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.176204][T19080] hsr_slave_0: entered promiscuous mode [ 1777.232287][T19080] hsr_slave_1: entered promiscuous mode [ 1777.238609][T19080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1777.281237][T19080] Cannot create hsr debugfs directory [ 1778.037509][T19227] chnl_net:caif_netlink_parms(): no params data found [ 1779.147285][T19446] netlink: 'syz.9.2937': attribute type 3 has an invalid length. [ 1779.547569][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1779.559656][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1779.568024][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1779.577117][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1779.589881][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1781.000443][T19472] loop4: detected capacity change from 0 to 512 [ 1781.013792][T19472] EXT4-fs: Ignoring removed nobh option [ 1781.067397][T19472] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1781.827627][T19472] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1781.950219][ T5847] Bluetooth: hci4: command tx timeout [ 1783.970397][ T5847] Bluetooth: hci4: command tx timeout [ 1784.039081][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.030735][T19227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.037999][T19227] bridge_slave_0: entered allmulticast mode [ 1785.163879][T19227] bridge_slave_0: entered promiscuous mode [ 1785.770610][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.813596][T19227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.859719][T19227] bridge_slave_1: entered allmulticast mode [ 1785.874991][T19227] bridge_slave_1: entered promiscuous mode [ 1786.731352][ T5847] Bluetooth: hci4: command tx timeout [ 1787.179811][T19523] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1787.930867][T19227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.002041][T19227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.044116][T19530] loop9: detected capacity change from 0 to 1024 [ 1789.303735][ T5847] Bluetooth: hci4: command tx timeout [ 1789.930180][T19540] hfsplus: xattr searching failed [ 1790.049880][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1790.049901][ T30] audit: type=1800 audit(1745043611.167:588): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2952" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 1790.527743][T19549] loop4: detected capacity change from 0 to 512 [ 1790.541195][T19549] EXT4-fs: Ignoring removed nobh option [ 1791.089351][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.101951][T19549] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1791.122399][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.482401][T19549] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1792.011370][T19227] team0: Port device team_slave_0 added [ 1793.099383][T19227] team0: Port device team_slave_1 added [ 1793.340661][T12351] bridge_slave_1: left allmulticast mode [ 1793.346376][T12351] bridge_slave_1: left promiscuous mode [ 1793.383380][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.432041][T12351] bridge_slave_0: left allmulticast mode [ 1793.437715][T12351] bridge_slave_0: left promiscuous mode [ 1793.453959][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.110385][T19582] kernel profiling enabled (shift: 7) [ 1794.709052][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.797019][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.833414][T12351] bond0 (unregistering): Released all slaves [ 1796.196132][T19608] loop9: detected capacity change from 0 to 1024 [ 1796.279224][T12351] hsr_slave_0: left promiscuous mode [ 1796.476284][T12351] hsr_slave_1: left promiscuous mode [ 1796.501466][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.082508][T19616] hfsplus: xattr searching failed [ 1797.088798][ T30] audit: type=1800 audit(1745043618.317:589): pid=19616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2963" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 1797.256406][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.765154][T19627] loop9: detected capacity change from 0 to 4096 [ 1798.775695][T19627] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 1800.047252][T19627] loop9: detected capacity change from 0 to 32768 [ 1801.394050][T19627] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop9": -EINTR [ 1801.414808][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1801.434434][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1802.396946][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1802.406778][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1802.421053][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1804.449972][ T5847] Bluetooth: hci6: command tx timeout [ 1804.571050][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1804.807390][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1805.546982][T19663] loop4: detected capacity change from 0 to 1024 [ 1806.641266][ T5847] Bluetooth: hci6: command tx timeout [ 1807.124236][ T6322] hfsplus: b-tree write err: -5, ino 4 [ 1808.889672][ T5847] Bluetooth: hci6: command tx timeout [ 1810.434475][T19692] loop9: detected capacity change from 0 to 32768 [ 1810.963198][T19689] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1810.989537][ T5847] Bluetooth: hci6: command tx timeout [ 1811.180695][T19692] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1811.180695][T19692] allowing incompatible features above 0.0: (unknown version) [ 1811.205299][T19692] bcachefs (loop9): initializing new filesystem [ 1811.212307][T19692] bcachefs (loop9): going read-write [ 1811.346250][T19692] bcachefs (loop9): marking superblocks [ 1811.367718][T19692] bcachefs (loop9): initializing freespace [ 1811.375469][T19692] bcachefs (loop9): done initializing freespace [ 1811.384589][T19692] bcachefs (loop9): reading snapshots table [ 1811.390598][T19692] bcachefs (loop9): reading snapshots done [ 1811.648683][T19227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1811.698473][T19692] bcachefs (loop9): done starting filesystem [ 1811.761191][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1811.872630][T19227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1811.930337][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1811.941424][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1811.949548][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1811.960782][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1811.972389][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1813.680450][T19455] chnl_net:caif_netlink_parms(): no params data found [ 1814.075779][ T5849] Bluetooth: hci7: command tx timeout [ 1814.552939][T14971] bcachefs (loop9): shutting down [ 1814.585238][T14971] bcachefs (loop9): going read-only [ 1814.646746][T14971] bcachefs (loop9): finished waiting for writes to stop [ 1814.786633][T14971] bcachefs (loop9): flushing journal and stopping allocators, journal seq 8 [ 1815.569671][T19747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1815.614133][T19455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.621010][T19747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1815.627573][T19455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.647239][T19455] bridge_slave_0: entered allmulticast mode [ 1815.656218][T19455] bridge_slave_0: entered promiscuous mode [ 1815.682329][T19455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.712076][T19455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.723230][T19455] bridge_slave_1: entered allmulticast mode [ 1815.747255][T19455] bridge_slave_1: entered promiscuous mode [ 1816.129700][ T5847] Bluetooth: hci7: command tx timeout [ 1816.278644][T19760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1816.285308][T19760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1816.315975][T19760] vhci_hcd vhci_hcd.0: Device attached [ 1816.522579][T18253] vhci_hcd: vhci_device speed not set [ 1816.622096][T18253] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1816.808828][T19765] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1816.955321][T19455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.981115][T19763] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 1816.987740][T19763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1816.995383][T19769] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 1817.001983][T19769] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1817.012995][T19760] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 1817.019604][T19760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1817.031276][T19769] vhci_hcd vhci_hcd.0: Device attached [ 1817.038614][T19763] vhci_hcd vhci_hcd.0: Device attached [ 1817.058073][T19760] vhci_hcd vhci_hcd.0: Device attached [ 1817.091524][T19763] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19) [ 1817.098149][T19763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1817.115087][T19763] vhci_hcd vhci_hcd.0: Device attached [ 1817.124517][T19760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1817.151975][T19455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.180700][T19763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1817.195718][T19760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1817.512749][T19771] vhci_hcd: connection closed [ 1817.513156][T19770] vhci_hcd: connection closed [ 1817.514099][T19774] vhci_hcd: connection closed [ 1817.519139][T19761] vhci_hcd: connection reset by peer [ 1817.522705][T12327] vhci_hcd: stop threads [ 1817.537090][T19776] vhci_hcd: connection closed [ 1818.240347][ T5847] Bluetooth: hci7: command tx timeout [ 1818.257609][T12327] vhci_hcd: release socket [ 1818.264047][T12327] vhci_hcd: disconnect device [ 1818.299877][T12327] vhci_hcd: stop threads [ 1818.304158][T12327] vhci_hcd: release socket [ 1818.339804][T12327] vhci_hcd: disconnect device [ 1818.357375][T12327] vhci_hcd: stop threads [ 1818.379519][T12327] vhci_hcd: release socket [ 1818.415613][T12327] vhci_hcd: disconnect device [ 1818.436731][T12327] vhci_hcd: stop threads [ 1818.459641][T12327] vhci_hcd: release socket [ 1818.464144][T12327] vhci_hcd: disconnect device [ 1818.519708][T12327] vhci_hcd: stop threads [ 1818.523987][T12327] vhci_hcd: release socket [ 1818.712750][T12327] vhci_hcd: disconnect device [ 1818.836402][T19800] SET target dimension over the limit! [ 1820.209345][T19455] team0: Port device team_slave_0 added [ 1820.289863][ T5847] Bluetooth: hci7: command tx timeout [ 1821.385620][T19455] team0: Port device team_slave_1 added [ 1821.439179][T19818] loop4: detected capacity change from 0 to 2048 [ 1821.477669][T19818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1821.573419][T12351] bridge_slave_1: left allmulticast mode [ 1821.579122][T12351] bridge_slave_1: left promiscuous mode [ 1822.826366][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.857331][T12351] bridge_slave_0: left allmulticast mode [ 1822.871360][T18253] vhci_hcd: vhci_device speed not set [ 1822.919692][T12351] bridge_slave_0: left promiscuous mode [ 1822.925466][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.116495][T12351] bridge_slave_1: left allmulticast mode [ 1823.176905][T12351] bridge_slave_1: left promiscuous mode [ 1823.235532][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.387553][T12351] bridge_slave_0: left allmulticast mode [ 1823.429577][T12351] bridge_slave_0: left promiscuous mode [ 1823.435350][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.576490][T12351] bridge_slave_1: left allmulticast mode [ 1823.739667][T12351] bridge_slave_1: left promiscuous mode [ 1823.749798][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.359561][T12351] bridge_slave_0: left allmulticast mode [ 1824.365264][T12351] bridge_slave_0: left promiscuous mode [ 1824.390036][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.546054][T19845] loop4: detected capacity change from 0 to 1024 [ 1826.320271][T19851] hfsplus: xattr searching failed [ 1826.326302][ T30] audit: type=1800 audit(1745043648.554:590): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2998" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1826.734669][T19854] loop4: detected capacity change from 0 to 1024 [ 1826.782547][T19854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1826.822232][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1826.865232][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1826.999154][T12351] bond0 (unregistering): Released all slaves [ 1827.049897][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.083579][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.145172][T12351] bond0 (unregistering): Released all slaves [ 1827.229969][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.791899][T19859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1827.809092][T19859] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 1827.821669][T19859] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1827.821669][T19859] [ 1827.831440][T19859] EXT4-fs (loop4): Total free blocks count 0 [ 1827.837550][T19859] EXT4-fs (loop4): Free/Dirty block details [ 1827.845951][T19859] EXT4-fs (loop4): free_blocks=68451041280 [ 1827.853822][T19859] EXT4-fs (loop4): dirty_blocks=32 [ 1827.858941][T19859] EXT4-fs (loop4): Block reservation details [ 1827.864969][T19859] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1827.913523][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1828.006848][T12351] bond0 (unregistering): Released all slaves [ 1828.143235][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.171283][T19455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1828.201892][T19455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.283695][T19455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1828.384196][T19455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.402495][T19861] loop4: detected capacity change from 0 to 16 [ 1828.411253][T19455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.463543][T19861] erofs (device loop4): mounted with root inode @ nid 36. [ 1828.469307][T19455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1828.503394][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1828.785975][ T5847] erofs (device loop4): failed to decompress -26 in[46, 0] out[9000] [ 1828.809093][T19869] erofs (device loop4): failed to decompress -26 in[46, 4050] out[8192] [ 1828.818236][T19869] erofs (device loop4): read error -117 @ 0 of nid 89 [ 1828.830225][ T30] audit: type=1800 audit(1745043651.054:591): pid=19869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3001" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1828.854904][T19869] erofs (device loop4): failed to decompress -26 in[46, 4050] out[9000] [ 1828.863802][T19869] erofs (device loop4): read error -117 @ 2 of nid 89 [ 1828.871728][T19869] erofs (device loop4): failed to decompress -26 in[46, 4050] out[9000] [ 1828.880436][T19869] erofs (device loop4): read error -117 @ 2 of nid 89 [ 1828.901430][T19869] erofs (device loop4): failed to decompress -26 in[46, 4050] out[9000] [ 1828.910339][T19869] erofs (device loop4): read error -117 @ 2 of nid 89 [ 1828.919669][T19869] erofs (device loop4): failed to decompress -26 in[46, 4050] out[9000] [ 1828.928202][T19869] erofs (device loop4): read error -117 @ 2 of nid 89 [ 1829.721557][T12351] hsr_slave_0: left promiscuous mode [ 1829.998525][T12351] hsr_slave_1: left promiscuous mode [ 1830.040353][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.058555][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.106311][T12351] hsr_slave_0: left promiscuous mode [ 1830.163985][T12351] hsr_slave_1: left promiscuous mode [ 1830.190055][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.207752][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.603670][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1831.787531][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1832.102555][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1832.111775][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1832.119637][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1832.130591][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1832.138271][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1832.990339][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1833.215901][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1834.211517][ T5849] Bluetooth: hci1: command tx timeout [ 1834.507978][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1834.552561][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1834.848660][T19630] chnl_net:caif_netlink_parms(): no params data found [ 1835.276784][T19933] loop4: detected capacity change from 0 to 40427 [ 1835.290189][T19933] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff [ 1835.321242][T19933] F2FS-fs (loop4): invalid crc value [ 1835.401322][T19933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1835.821342][T19944] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x197/0xcc0 [ 1836.263948][T19455] hsr_slave_0: entered promiscuous mode [ 1836.291655][T19455] hsr_slave_1: entered promiscuous mode [ 1836.340014][T15870] Bluetooth: hci1: command tx timeout [ 1836.476715][ T6798] bio_check_eod: 66 callbacks suppressed [ 1836.476737][ T6798] syz-executor: attempt to access beyond end of device [ 1836.476737][ T6798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1836.544149][ T6798] CPU: 1 UID: 0 PID: 6798 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1836.544186][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1836.544202][ T6798] Call Trace: [ 1836.544213][ T6798] [ 1836.544225][ T6798] dump_stack_lvl+0x241/0x360 [ 1836.544273][ T6798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1836.544311][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.544341][ T6798] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1836.544382][ T6798] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1836.544423][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.544452][ T6798] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 1836.544496][ T6798] f2fs_handle_critical_error+0x392/0x5a0 [ 1836.544545][ T6798] f2fs_write_end_io+0x563/0x790 [ 1836.544595][ T6798] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1836.544641][ T6798] ? bio_endio+0x7e4/0x890 [ 1836.544678][ T6798] ? bio_endio+0x82a/0x890 [ 1836.544711][ T6798] __submit_merged_bio+0x2a9/0x710 [ 1836.544742][ T6798] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 1836.544784][ T6798] f2fs_submit_merged_write_cond+0x29f/0x380 [ 1836.544836][ T6798] f2fs_write_data_pages+0x2f99/0x38d0 [ 1836.544932][ T6798] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1836.544994][ T6798] ? is_bpf_text_address+0x26/0x2a0 [ 1836.545091][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545120][ T6798] ? stack_trace_save+0x11a/0x1d0 [ 1836.545169][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545198][ T6798] ? __lock_acquire+0xad5/0xd80 [ 1836.545242][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545271][ T6798] ? do_raw_spin_lock+0x151/0x370 [ 1836.545314][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545343][ T6798] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1836.545380][ T6798] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1836.545422][ T6798] do_writepages+0x366/0x890 [ 1836.545470][ T6798] ? __pfx_do_writepages+0x10/0x10 [ 1836.545501][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545529][ T6798] ? __lock_acquire+0xad5/0xd80 [ 1836.545572][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545601][ T6798] ? do_raw_spin_lock+0x151/0x370 [ 1836.545649][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545681][ T6798] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1836.545726][ T6798] filemap_fdatawrite+0x1f2/0x2a0 [ 1836.545767][ T6798] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1836.545799][ T6798] ? mlock_drain_local+0x79/0x490 [ 1836.545901][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.545929][ T6798] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1836.545974][ T6798] f2fs_sync_dirty_inodes+0x34f/0x860 [ 1836.546037][ T6798] f2fs_write_checkpoint+0x857/0x1da0 [ 1836.546110][ T6798] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1836.546215][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.546243][ T6798] ? kfree+0x198/0x430 [ 1836.546265][ T6798] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1836.546294][ T6798] ? kill_f2fs_super+0x290/0x6d0 [ 1836.546343][ T6798] kill_f2fs_super+0x2b8/0x6d0 [ 1836.546393][ T6798] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1836.546445][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.546474][ T6798] ? shrinker_free+0x2ca/0x3d0 [ 1836.546506][ T6798] deactivate_locked_super+0xc6/0x130 [ 1836.546544][ T6798] cleanup_mnt+0x422/0x4c0 [ 1836.546574][ T6798] ? lockdep_hardirqs_on+0x9d/0x150 [ 1836.546606][ T6798] task_work_run+0x253/0x310 [ 1836.546650][ T6798] ? __pfx_task_work_run+0x10/0x10 [ 1836.546696][ T6798] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1836.546732][ T6798] syscall_exit_to_user_mode+0x13f/0x340 [ 1836.546766][ T6798] do_syscall_64+0x100/0x210 [ 1836.546802][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.546827][ T6798] RIP: 0033:0x7f55f1f8f497 [ 1836.546849][ T6798] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1836.546871][ T6798] RSP: 002b:00007fff9e3a26c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1836.546898][ T6798] RAX: 0000000000000000 RBX: 00007f55f2010854 RCX: 00007f55f1f8f497 [ 1836.546916][ T6798] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e3a2780 [ 1836.546932][ T6798] RBP: 00007fff9e3a2780 R08: 0000000000000000 R09: 0000000000000000 [ 1836.546949][ T6798] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9e3a3810 [ 1836.546967][ T6798] R13: 00007f55f2010854 R14: 00000000001c053b R15: 00007fff9e3a3850 [ 1836.547013][ T6798] [ 1836.547025][ T6798] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1837.239842][T19714] chnl_net:caif_netlink_parms(): no params data found [ 1838.006044][T19630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.020478][T19630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.028513][T19630] bridge_slave_0: entered allmulticast mode [ 1838.036619][T19630] bridge_slave_0: entered promiscuous mode [ 1838.080009][T19630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.087182][T19630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.414856][T15870] Bluetooth: hci1: command tx timeout [ 1838.754036][T19630] bridge_slave_1: entered allmulticast mode [ 1838.762035][T19630] bridge_slave_1: entered promiscuous mode [ 1840.451064][T15870] Bluetooth: hci1: command tx timeout [ 1840.690589][T19630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.771655][T19630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.094060][T15870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1842.117268][T15870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1842.410620][T15870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1842.418665][T15870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1842.426791][T15870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1842.536661][T19714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.554519][T19714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.590626][T19714] bridge_slave_0: entered allmulticast mode [ 1842.598734][T19714] bridge_slave_0: entered promiscuous mode [ 1842.765393][T19630] team0: Port device team_slave_0 added [ 1842.816519][T19630] team0: Port device team_slave_1 added [ 1842.909005][T19714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.923330][T19714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.932745][T19714] bridge_slave_1: entered allmulticast mode [ 1842.941927][T19714] bridge_slave_1: entered promiscuous mode [ 1844.019522][ T30] audit: type=1326 audit(1745043666.234:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.099616][ T30] audit: type=1326 audit(1745043666.234:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.193923][ T30] audit: type=1326 audit(1745043666.244:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.216264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1844.286295][T19630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1844.388873][T19630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.414865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1844.522982][ T30] audit: type=1326 audit(1745043666.254:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.545898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1844.579662][T19630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1844.590371][T15870] Bluetooth: hci4: command tx timeout [ 1844.643451][ T30] audit: type=1326 audit(1745043666.254:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.666058][ T30] audit: type=1326 audit(1745043666.304:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.692127][ T30] audit: type=1326 audit(1745043666.304:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.715055][ T30] audit: type=1326 audit(1745043666.304:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.747703][T19630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1844.760639][T19630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.799791][ T30] audit: type=1326 audit(1745043666.304:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.837158][T19630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1844.857019][ T30] audit: type=1326 audit(1745043666.304:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20026 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650d78e169 code=0x7ffc0000 [ 1844.861111][T19902] chnl_net:caif_netlink_parms(): no params data found [ 1844.879346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1845.305701][T19714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.503780][T19714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.619697][T15870] Bluetooth: hci4: command tx timeout [ 1846.700673][T19630] hsr_slave_0: entered promiscuous mode [ 1846.707367][T19630] hsr_slave_1: entered promiscuous mode [ 1846.790424][T19630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1846.798143][T19630] Cannot create hsr debugfs directory [ 1846.861462][T20060] loop4: detected capacity change from 0 to 64 [ 1847.154980][T19714] team0: Port device team_slave_0 added [ 1847.558565][T19714] team0: Port device team_slave_1 added [ 1848.710643][T15870] Bluetooth: hci4: command tx timeout [ 1848.950333][T19902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.957527][T19902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.028607][T19902] bridge_slave_0: entered allmulticast mode [ 1849.061690][T19902] bridge_slave_0: entered promiscuous mode [ 1849.080967][T19902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.104922][T19902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.116783][T19902] bridge_slave_1: entered allmulticast mode [ 1849.128545][T19902] bridge_slave_1: entered promiscuous mode [ 1849.283362][T19714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.306428][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.340768][T19714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.369256][T19714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.376279][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.402153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1849.434442][T19714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.450501][T12351] bridge_slave_1: left allmulticast mode [ 1849.461315][T12351] bridge_slave_1: left promiscuous mode [ 1849.484314][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.570272][T12351] bridge_slave_0: left allmulticast mode [ 1849.624470][T12351] bridge_slave_0: left promiscuous mode [ 1849.644045][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.870797][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1849.899330][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1849.952652][T12351] bond0 (unregistering): Released all slaves [ 1850.159830][T12351] hsr_slave_0: left promiscuous mode [ 1850.169577][T12351] hsr_slave_1: left promiscuous mode [ 1850.175571][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.201991][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.433323][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1850.467204][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1850.760405][T19902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.770038][T15870] Bluetooth: hci4: command tx timeout [ 1850.898501][T19902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.149192][T19902] team0: Port device team_slave_0 added [ 1851.262873][T19902] team0: Port device team_slave_1 added [ 1851.355033][T19714] hsr_slave_0: entered promiscuous mode [ 1851.375907][T19714] hsr_slave_1: entered promiscuous mode [ 1851.736548][T19902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.755023][T19902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.781042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.809611][T19902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.854354][T19902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.873620][T19902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.899552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.913502][T19902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.500008][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.506347][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.364569][T20011] chnl_net:caif_netlink_parms(): no params data found [ 1853.425586][T19902] hsr_slave_0: entered promiscuous mode [ 1853.439262][T19902] hsr_slave_1: entered promiscuous mode [ 1853.446614][T19902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1853.466890][T19902] Cannot create hsr debugfs directory [ 1853.497572][T19630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1853.907790][T19630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1854.594826][T19630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1855.037236][T20011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.046479][T20011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.062478][T20011] bridge_slave_0: entered allmulticast mode [ 1855.070575][T20011] bridge_slave_0: entered promiscuous mode [ 1855.107289][T20011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.115338][T20011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.122739][T20011] bridge_slave_1: entered allmulticast mode [ 1855.132400][T20011] bridge_slave_1: entered promiscuous mode [ 1855.356254][T20011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1855.436426][T20011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.740167][T20011] team0: Port device team_slave_0 added [ 1856.134307][T20011] team0: Port device team_slave_1 added [ 1856.326720][T20011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1856.339476][T20011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.399715][T20011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1856.435241][T20011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.445044][T20011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.519305][T20011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.937113][T20011] hsr_slave_0: entered promiscuous mode [ 1856.950412][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1856.962028][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1856.964815][T20011] hsr_slave_1: entered promiscuous mode [ 1857.333961][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1857.523275][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1857.531233][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1857.580636][T20011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1857.619965][T20011] Cannot create hsr debugfs directory [ 1858.551545][T19714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1858.844695][T19902] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.875009][T19714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1858.893784][T19714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1858.983680][T20211] loop4: detected capacity change from 0 to 64 [ 1859.048822][T19714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1859.195774][T12337] bridge_slave_1: left allmulticast mode [ 1859.211452][T12337] bridge_slave_1: left promiscuous mode [ 1859.232502][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.266016][T12337] bridge_slave_0: left allmulticast mode [ 1859.284866][T12337] bridge_slave_0: left promiscuous mode [ 1859.304674][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.570463][T15870] Bluetooth: hci5: command tx timeout [ 1859.576625][T12337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.631633][T12337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.762770][T12337] bond0 (unregistering): Released all slaves [ 1860.269002][T19902] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.399650][T12337] hsr_slave_0: left promiscuous mode [ 1860.421286][T12337] hsr_slave_1: left promiscuous mode [ 1860.427389][T12337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1860.447757][T12337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.024937][T12337] team0 (unregistering): Port device team_slave_1 removed [ 1861.108797][T12337] team0 (unregistering): Port device team_slave_0 removed [ 1861.645121][T19902] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.655878][T15870] Bluetooth: hci5: command tx timeout [ 1861.770112][T19902] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.465796][T19714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1862.573388][T19902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1862.671343][T20189] chnl_net:caif_netlink_parms(): no params data found [ 1863.237355][T19902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1863.555276][T19902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1863.671839][T19714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1863.739630][T15870] Bluetooth: hci5: command tx timeout [ 1863.927735][T19902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1863.952773][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1864.073747][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1864.086596][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1864.103635][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1864.119133][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1864.665689][T18744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.672929][T18744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1864.807125][T20011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1864.853483][T20278] loop4: detected capacity change from 0 to 1024 [ 1864.917987][T20011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1864.935709][T12337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.942936][T12337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.053996][T20011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1865.080042][T20189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.131917][T20189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.170014][T20189] bridge_slave_0: entered allmulticast mode [ 1865.503180][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.510627][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.518551][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.526070][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.534153][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.541497][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.551092][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.558416][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.566365][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.574449][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.582657][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.590037][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.597882][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.605451][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.614645][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.622023][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.630916][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.638241][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.646501][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.653875][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.662187][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.669549][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.679240][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.686971][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.695091][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.702578][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.709986][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.717903][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.725303][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.732746][T20286] hfsplus: request for non-existent node 16777216 in B*Tree [ 1865.737047][T20189] bridge_slave_0: entered promiscuous mode [ 1865.753957][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1865.753978][ T30] audit: type=1800 audit(1745043687.974:650): pid=20286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3041" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1865.802912][T20189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.812301][T15870] Bluetooth: hci5: command tx timeout [ 1865.822556][T20189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.843076][T20189] bridge_slave_1: entered allmulticast mode [ 1865.860331][T20189] bridge_slave_1: entered promiscuous mode [ 1865.906291][T20011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1866.663326][T20189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1866.771735][T15870] Bluetooth: hci6: command tx timeout [ 1866.857260][T20189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1867.038453][T20301] loop4: detected capacity change from 0 to 1764 [ 1867.046122][T20301] iso9660: Unknown parameter 'ÿ' [ 1867.164276][T20189] team0: Port device team_slave_0 added [ 1867.198900][T19714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1867.268534][T20189] team0: Port device team_slave_1 added [ 1867.415156][T20189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1867.428920][T20189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.465274][T20189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1867.564419][T20189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1867.575665][T20189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1867.604881][T20189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.791712][T20189] hsr_slave_0: entered promiscuous mode [ 1867.805260][T20189] hsr_slave_1: entered promiscuous mode [ 1867.821002][T20189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1867.848853][T20189] Cannot create hsr debugfs directory [ 1868.573507][T20011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1868.859659][T15870] Bluetooth: hci6: command tx timeout [ 1868.874445][T19902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.267789][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1869.324809][T19902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.408568][T20011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.353694][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.360944][T12334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.401911][T12334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.409115][T12334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.554254][T20270] chnl_net:caif_netlink_parms(): no params data found [ 1870.598356][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.605574][T12334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.675100][T12334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.682339][T12334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.935065][T15870] Bluetooth: hci6: command tx timeout [ 1871.668945][T12328] Allocator stuck? Waited for 30 seconds [ 1871.668983][T12328] Allocator debug: [ 1871.668996][T12328] capacity26112 [ 1871.669008][T12328] reserved 6656 [ 1871.669021][T12328] hidden 0 [ 1871.669033][T12328] btree 544 [ 1871.669047][T12328] data 1224 [ 1871.669060][T12328] cached 0 [ 1871.669073][T12328] reserved 0 [ 1871.669086][T12328] online_reserved 256 [ 1871.669099][T12328] nr_inodes 0 [ 1871.669112][T12328] [ 1871.669124][T12328] freelist_wait waiting [ 1871.669138][T12328] open buckets allocated3 [ 1871.669151][T12328] open buckets total 1024 [ 1871.669163][T12328] open_buckets_wait empty [ 1871.669176][T12328] open_buckets_btree 1 [ 1871.669190][T12328] open_buckets_user 1 [ 1871.669203][T12328] btree reserve cache 0 [ 1871.669216][T12328] [ 1871.669227][T12328] Dev 0: [ 1871.669240][T12328] buckets sectors fragmented [ 1871.669256][T12328] free 2 0 0 [ 1871.669272][T12328] sb 25 6152 248 [ 1871.669287][T12328] journal 8 2048 0 [ 1871.669303][T12328] btree 10 544 2016 [ 1871.669319][T12328] user 5 1224 56 [ 1871.669335][T12328] cached 0 0 0 [ 1871.669350][T12328] parity 0 0 0 [ 1871.669366][T12328] stripe 0 0 0 [ 1871.669382][T12328] need_gc_gens 0 0 0 [ 1871.677617][T12328] need_discard 78 0 0 [ 1871.677637][T12328] unstriped 0 0 0 [ 1871.677653][T12328] capacity 128 [ 1871.677666][T12328] [ 1871.677678][T12328] reserves: [ 1871.677690][T12328] stripe 12 [ 1871.677703][T12328] normal 10 [ 1871.677716][T12328] copygc 8 [ 1871.677735][T12328] btree 4 [ 1871.677749][T12328] btree_copygc 0 [ 1871.677762][T12328] reclaim 0 [ 1871.677776][T12328] interior_updates 0 [ 1871.677789][T12328] [ 1871.677801][T12328] open buckets 2 [ 1871.677814][T12328] buckets to invalidate 0 [ 1871.677828][T12328] [ 1871.677839][T12328] Copygc debug: [ 1871.677852][T12328] running: 0 [ 1871.677864][T12328] copygc_wait:27944 [ 1871.677876][T12328] copygc_wait_at:19720 [ 1871.677890][T12328] Currently waiting for:0 B [ 1871.677903][T12328] Currently waiting since:10.4 MiB [ 1871.677917][T12328] Currently calculated wait:6.23 KiB [ 1871.677930][T12328] [ 1871.677942][T12328] Journal debug: [ 1871.677955][T12328] flags: replay_done,running,may_skip_flush [ 1871.677971][T12328] dirty journal entries: 1/32768 [ 1871.677985][T12328] seq: 222 [ 1871.677998][T12328] seq_ondisk: 222 [ 1871.678012][T12328] last_seq: 222 [ 1871.678026][T12328] last_seq_ondisk: 222 [ 1871.678039][T12328] flushed_seq_ondisk: 222 [ 1871.678053][T12328] watermark: stripe [ 1871.678067][T12328] each entry reserved: 321 [ 1871.678081][T12328] nr flush writes: 28 [ 1871.678094][T12328] nr noflush writes: 194 [ 1871.678108][T12328] average write size: 4.89 KiB [ 1871.678122][T12328] free buf: 131072 [ 1871.678136][T12328] nr direct reclaim: 0 [ 1871.678150][T12328] nr background reclaim: 46 [ 1871.678163][T12328] reclaim kicked: 0 [ 1871.678177][T12328] reclaim runs in: 0 ms [ 1871.678190][T12328] blocked: 0 [ 1871.678203][T12328] current entry sectors: 256 [ 1871.678217][T12328] current entry error: (No error) [ 1871.678231][T12328] current entry: closed [ 1871.678243][T12328] unwritten entries: [ 1871.678256][T12328] last buf closed [ 1871.678268][T12328] space: [ 1871.678280][T12328] discarded 256:1536 [ 1871.678293][T12328] clean ondisk 256:1536 [ 1871.678307][T12328] clean 256:1536 [ 1871.678321][T12328] total 256:2048 [ 1871.678335][T12328] dev 0: [ 1871.678347][T12328] durability 1: [ 1871.678359][T12328] nr 8 [ 1871.678373][T12328] bucket size 256 [ 1871.678387][T12328] available 6:16 [ 1871.678400][T12328] discard_idx 4 [ 1871.678413][T12328] dirty_ondisk 4 (seq 222) [ 1871.678427][T12328] dirty_idx 4 (seq 222) [ 1871.678441][T12328] cur_idx 4 (seq 222) [ 1871.678454][T12328] replicas want 1 need 1 [ 1871.743089][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1871.745808][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1871.746728][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1871.748430][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1871.751897][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1872.131674][T20270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.131793][T20270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.131970][T20270] bridge_slave_0: entered allmulticast mode [ 1872.133945][T20270] bridge_slave_0: entered promiscuous mode [ 1872.215214][T20011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1872.274239][T20270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.274357][T20270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.274621][T20270] bridge_slave_1: entered allmulticast mode [ 1872.280117][T20270] bridge_slave_1: entered promiscuous mode [ 1872.648565][T14971] Allocator stuck? Waited for 30 seconds [ 1872.648609][T14971] Allocator debug: [ 1872.648622][T14971] capacity26112 [ 1872.648636][T14971] reserved 6656 [ 1872.648649][T14971] hidden 0 [ 1872.648663][T14971] btree 544 [ 1872.648676][T14971] data 1224 [ 1872.648690][T14971] cached 0 [ 1872.648703][T14971] reserved 0 [ 1872.648716][T14971] online_reserved 256 [ 1872.648729][T14971] nr_inodes 0 [ 1872.648743][T14971] [ 1872.648755][T14971] freelist_wait waiting [ 1872.648769][T14971] open buckets allocated3 [ 1872.648783][T14971] open buckets total 1024 [ 1872.648797][T14971] open_buckets_wait empty [ 1872.648810][T14971] open_buckets_btree 1 [ 1872.648824][T14971] open_buckets_user 1 [ 1872.648838][T14971] btree reserve cache 0 [ 1872.648851][T14971] [ 1872.648863][T14971] Dev 0: [ 1872.648875][T14971] buckets sectors fragmented [ 1872.648891][T14971] free 2 0 0 [ 1872.648907][T14971] sb 25 6152 248 [ 1872.648923][T14971] journal 8 2048 0 [ 1872.648940][T14971] btree 10 544 2016 [ 1872.648956][T14971] user 5 1224 56 [ 1872.648978][T14971] cached 0 0 0 [ 1872.648994][T14971] parity 0 0 0 [ 1872.649010][T14971] stripe 0 0 0 [ 1872.649026][T14971] need_gc_gens 0 0 0 [ 1872.649042][T14971] need_discard 78 0 0 [ 1872.649058][T14971] unstriped 0 0 0 [ 1872.649074][T14971] capacity 128 [ 1872.649088][T14971] [ 1872.649100][T14971] reserves: [ 1872.649113][T14971] stripe 12 [ 1872.649127][T14971] normal 10 [ 1872.649140][T14971] copygc 8 [ 1872.649154][T14971] btree 4 [ 1872.649168][T14971] btree_copygc 0 [ 1872.649182][T14971] reclaim 0 [ 1872.649195][T14971] interior_updates 0 [ 1872.649209][T14971] [ 1872.649221][T14971] open buckets 2 [ 1872.649234][T14971] buckets to invalidate 0 [ 1872.649248][T14971] [ 1872.649260][T14971] Copygc debug: [ 1872.649272][T14971] running: 0 [ 1872.649285][T14971] copygc_wait:27944 [ 1872.649298][T14971] copygc_wait_at:19720 [ 1872.649311][T14971] Currently waiting for:0 B [ 1872.649325][T14971] Currently waiting since:10.4 MiB [ 1872.649339][T14971] Currently calculated wait:6.23 KiB [ 1872.649354][T14971] [ 1872.649365][T14971] Journal debug: [ 1872.649379][T14971] flags: replay_done,running,may_skip_flush [ 1872.656596][T14971] dirty journal entries: 1/32768 [ 1872.656615][T14971] seq: 222 [ 1872.656629][T14971] seq_ondisk: 222 [ 1872.656643][T14971] last_seq: 222 [ 1872.656656][T14971] last_seq_ondisk: 222 [ 1872.656670][T14971] flushed_seq_ondisk: 222 [ 1872.656684][T14971] watermark: stripe [ 1872.656699][T14971] each entry reserved: 321 [ 1872.656713][T14971] nr flush writes: 28 [ 1872.656726][T14971] nr noflush writes: 194 [ 1872.656740][T14971] average write size: 4.89 KiB [ 1872.656755][T14971] free buf: 131072 [ 1872.656768][T14971] nr direct reclaim: 0 [ 1872.656782][T14971] nr background reclaim: 46 [ 1872.656796][T14971] reclaim kicked: 0 [ 1872.656809][T14971] reclaim runs in: 0 ms [ 1872.656823][T14971] blocked: 0 [ 1872.656836][T14971] current entry sectors: 256 [ 1872.656850][T14971] current entry error: (No error) [ 1872.656865][T14971] current entry: closed [ 1872.656879][T14971] unwritten entries: [ 1872.656892][T14971] last buf closed [ 1872.656905][T14971] space: [ 1872.656917][T14971] discarded 256:1536 [ 1872.656932][T14971] clean ondisk 256:1536 [ 1872.656946][T14971] clean 256:1536 [ 1872.656960][T14971] total 256:2048 [ 1872.656980][T14971] dev 0: [ 1872.656992][T14971] durability 1: [ 1872.657005][T14971] nr 8 [ 1872.657019][T14971] bucket size 256 [ 1872.657033][T14971] available 6:16 [ 1872.657047][T14971] discard_idx 4 [ 1872.657060][T14971] dirty_ondisk 4 (seq 222) [ 1872.657075][T14971] dirty_idx 4 (seq 222) [ 1872.657089][T14971] cur_idx 4 (seq 222) [ 1872.657104][T14971] replicas want 1 need 1 [ 1873.011368][ T5849] Bluetooth: hci6: command tx timeout [ 1873.153776][T20270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.680160][T20270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.809546][ T5849] Bluetooth: hci7: command tx timeout [ 1873.930169][T20406] loop4: detected capacity change from 0 to 64 [ 1874.358937][T20270] team0: Port device team_slave_0 added [ 1874.397228][T20270] team0: Port device team_slave_1 added [ 1874.560535][T20410] loop4: detected capacity change from 0 to 512 [ 1874.568462][T20410] EXT4-fs: Ignoring removed oldalloc option [ 1874.579777][T20410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1874.632265][T20410] EXT4-fs (loop4): 1 truncate cleaned up [ 1874.656195][T20410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1874.674908][T20270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.689909][T20270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.717464][T20270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.976442][T19902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.100557][T20270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1875.122871][T20270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1875.150467][T20270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1875.165607][ T5849] Bluetooth: hci6: command tx timeout [ 1875.786346][T20011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.845788][ T6798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1875.900138][ T5849] Bluetooth: hci7: command tx timeout [ 1876.404486][T20189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1876.741264][T20189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1876.767338][T20270] hsr_slave_0: entered promiscuous mode [ 1876.810868][T20270] hsr_slave_1: entered promiscuous mode [ 1876.831543][T20270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1876.862946][T20270] Cannot create hsr debugfs directory [ 1877.060225][T20189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1877.081029][T20189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1877.325222][T20447] overlayfs: overlapping lowerdir path [ 1877.452835][T20448] 9pnet_fd: Insufficient options for proto=fd [ 1877.979677][ T5849] Bluetooth: hci7: command tx timeout [ 1878.215785][T12327] bridge_slave_1: left allmulticast mode [ 1878.239497][T12327] bridge_slave_1: left promiscuous mode [ 1878.245281][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.263577][T12327] bridge_slave_0: left allmulticast mode [ 1878.278532][T12327] bridge_slave_0: left promiscuous mode [ 1878.286072][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.826822][T20471] loop4: detected capacity change from 0 to 8 [ 1880.080192][T20471] SQUASHFS error: Unable to read directory block [2c0:35] [ 1880.099506][ T5849] Bluetooth: hci7: command tx timeout [ 1880.405021][T12327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1880.524992][T12327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1880.579690][T12327] bond0 (unregistering): Released all slaves [ 1880.753951][T20369] chnl_net:caif_netlink_parms(): no params data found [ 1880.780131][T12327] hsr_slave_0: left promiscuous mode [ 1880.786356][T12327] hsr_slave_1: left promiscuous mode [ 1880.799921][T12327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.826627][T12327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.171372][T12327] team0 (unregistering): Port device team_slave_1 removed [ 1881.215519][T12327] team0 (unregistering): Port device team_slave_0 removed [ 1881.942254][T20189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1881.986702][T20189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.080225][T20011] veth0_vlan: entered promiscuous mode [ 1882.398681][T12329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.405893][T12329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.468634][T20011] veth1_vlan: entered promiscuous mode [ 1882.568910][T10522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.576119][T10522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1882.806354][T19902] veth0_vlan: entered promiscuous mode [ 1882.846669][T20369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.864650][T20369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.879788][T20369] bridge_slave_0: entered allmulticast mode [ 1882.898982][T20369] bridge_slave_0: entered promiscuous mode [ 1882.975653][T20369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.995045][T20369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.005523][T20369] bridge_slave_1: entered allmulticast mode [ 1883.021645][T20369] bridge_slave_1: entered promiscuous mode [ 1883.099349][T19902] veth1_vlan: entered promiscuous mode [ 1883.126103][T20011] veth0_macvtap: entered promiscuous mode [ 1883.155571][T20369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1883.206057][T20369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1883.264599][T19902] veth0_macvtap: entered promiscuous mode [ 1883.275197][T19902] veth1_macvtap: entered promiscuous mode [ 1883.301191][T20011] veth1_macvtap: entered promiscuous mode [ 1883.476308][T20369] team0: Port device team_slave_0 added [ 1884.204655][T20369] team0: Port device team_slave_1 added [ 1884.308597][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.325834][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.343442][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.355501][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.365372][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.376336][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.386229][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.396816][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.397898][T20502] loop4: detected capacity change from 0 to 128 [ 1884.409150][T19902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.481776][T20502] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1884.506342][T20502] ext4 filesystem being mounted at /759/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1884.568668][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.588342][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.611417][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.689954][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.737140][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.748719][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.766917][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.778033][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.799187][T19902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.818257][T19902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.872572][T19902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.940700][T20369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1884.970932][T20369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.072272][T20369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1885.368047][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.406529][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.455374][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.496388][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.528032][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.580660][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.624439][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.668523][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.704853][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1885.757221][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1885.821943][T20011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1885.882267][T20369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1885.909373][T20369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1886.001388][T20369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.147529][T19902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.215423][T19902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.265615][T20502] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1886.272193][T20502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1886.299177][T20502] vhci_hcd vhci_hcd.0: Device attached [ 1886.325976][T19902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.395036][T19902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.557194][T20513] vhci_hcd: connection closed [ 1886.558963][T12327] vhci_hcd: stop threads [ 1886.640195][ T5827] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1886.676736][T12327] vhci_hcd: release socket [ 1886.732970][T12327] vhci_hcd: disconnect device [ 1887.097625][T20270] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1887.130111][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1887.173302][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.192713][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1887.204494][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.220064][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1887.238601][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.248833][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1887.271252][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.291964][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1887.308707][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.329569][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1887.349742][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1887.369269][T20011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1887.387611][ T6798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1887.456736][T20270] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1887.505015][T20011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.549573][T20011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.558337][T20011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.619769][T20011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.640673][T20527] loop4: detected capacity change from 0 to 1024 [ 1887.658722][T20527] hfsplus: Unknown parameter 'u 1 [ 1934.375006][T15870] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1934.383396][T15870] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1934.394056][T15870] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1934.405388][T15870] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1937.099072][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3106'. [ 1937.240139][T15870] Bluetooth: min 0 < 6 [ 1937.572685][T15870] Bluetooth: hci8: command tx timeout [ 1938.140198][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1938.184179][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1938.193228][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1938.203343][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1938.222798][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1939.247398][T20917] PKCS7: Unknown OID: [5] (bad) [ 1939.252393][T20917] PKCS7: Only support pkcs7_signedData type [ 1939.258482][ T5849] Bluetooth: hci6: command tx timeout [ 1939.659508][ T5849] Bluetooth: hci8: command tx timeout [ 1940.534545][ T5849] Bluetooth: hci3: command tx timeout [ 1940.684546][ T6741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.789081][T20926] loop5: detected capacity change from 0 to 1024 [ 1941.889650][ T5849] Bluetooth: hci8: command tx timeout [ 1942.084387][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1942.168995][ T6741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.450168][ T5849] Bluetooth: hci3: command tx timeout [ 1943.970874][ T5849] Bluetooth: hci8: command tx timeout [ 1944.822880][ T6741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.453629][ T6741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.494758][ T5849] Bluetooth: hci3: command tx timeout [ 1945.745034][T20976] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3121'. [ 1946.323564][T20974] PKCS7: Unknown OID: [5] (bad) [ 1946.328443][T20974] PKCS7: Only support pkcs7_signedData type [ 1946.685884][T20985] syz.3.3125(20985): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1946.782268][T20990] loop8: detected capacity change from 0 to 64 [ 1946.809111][T20991] loop5: detected capacity change from 0 to 16 [ 1947.680398][ T5849] Bluetooth: hci3: command tx timeout [ 1950.116090][T20867] chnl_net:caif_netlink_parms(): no params data found [ 1951.571041][T21028] PKCS7: Unknown OID: [5] (bad) [ 1951.575921][T21028] PKCS7: Only support pkcs7_signedData type [ 1954.490665][ T6741] bridge_slave_1: left allmulticast mode [ 1954.499726][ T6741] bridge_slave_1: left promiscuous mode [ 1954.535023][T21049] loop5: detected capacity change from 0 to 2048 [ 1954.557756][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.207504][ T6741] bridge_slave_0: left allmulticast mode [ 1955.221796][T21049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1955.226956][ T6741] bridge_slave_0: left promiscuous mode [ 1955.430168][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.349756][T15870] Bluetooth: hci1: command 0x0406 tx timeout [ 1960.590639][T21079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1962.022615][T21085] loop5: detected capacity change from 0 to 512 [ 1962.035017][T21085] EXT4-fs: Ignoring removed mblk_io_submit option [ 1962.926202][T21085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1962.998099][T21087] loop8: detected capacity change from 0 to 256 [ 1963.079057][T21087] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1963.116722][T21091] PKCS7: Unknown OID: [5] (bad) [ 1963.121669][T21091] PKCS7: Only support pkcs7_signedData type [ 1963.251609][T20189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1967.072218][T21094] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3146'. [ 1967.125643][T21114] loop5: detected capacity change from 0 to 16 [ 1967.310621][T15870] Bluetooth: hci4: command 0x0406 tx timeout [ 1967.435090][T21114] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1968.693185][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1968.716442][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.737380][ T6741] bond0 (unregistering): Released all slaves [ 1969.913225][T21087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1969.919881][T21087] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1969.961070][T21087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1969.967045][T21087] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1969.975737][T21087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1969.982032][T21087] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1969.991399][T21087] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1969.997327][T21087] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1970.006808][T20867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.192731][T21087] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1970.226238][T21087] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1970.232251][T21087] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1970.415597][T20867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.545039][T20867] bridge_slave_0: entered allmulticast mode [ 1970.959702][T20867] bridge_slave_0: entered promiscuous mode [ 1970.981124][T20898] chnl_net:caif_netlink_parms(): no params data found [ 1970.992919][T21087] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1971.042506][T21087] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1971.049139][T21087] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1971.074275][T21087] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1971.081323][T21087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1971.087262][T21087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1971.095134][T21087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1971.478126][T21139] PKCS7: Unknown OID: [5] (bad) [ 1971.500536][T21139] PKCS7: Only support pkcs7_signedData type [ 1972.129762][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 1972.135864][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 1972.141981][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 1972.147999][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 1972.289688][T15870] Bluetooth: hci6: command 0x0c1a tx timeout [ 1972.363618][T21149] loop5: detected capacity change from 0 to 1024 [ 1972.719326][T20867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.089757][T15870] Bluetooth: hci8: command 0x0c1a tx timeout [ 1973.181900][T15870] Bluetooth: hci3: command 0x0c1a tx timeout [ 1973.495010][T20867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.504150][T20867] bridge_slave_1: entered allmulticast mode [ 1973.512265][T20867] bridge_slave_1: entered promiscuous mode [ 1974.289885][T21167] hfsplus: xattr searching failed [ 1974.295521][ T30] audit: type=1800 audit(1745043796.522:652): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3161" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1974.315566][T15870] Bluetooth: hci1: command 0x0406 tx timeout [ 1974.322366][T15870] Bluetooth: hci4: command 0x0406 tx timeout [ 1974.328376][T15870] Bluetooth: hci5: command 0x0c1a tx timeout [ 1974.336093][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 1974.496465][T15870] Bluetooth: hci6: command 0x0c1a tx timeout [ 1974.517553][T21163] loop6: detected capacity change from 0 to 1024 [ 1975.778293][T15870] Bluetooth: hci3: command 0x0c1a tx timeout [ 1975.784895][ T5847] Bluetooth: hci8: command 0x0c1a tx timeout [ 1975.831174][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.090334][T21175] hfsplus: xattr searching failed [ 1976.799823][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 1976.806696][ T5847] Bluetooth: hci6: command 0x0c1a tx timeout [ 1976.813184][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.819719][ T30] audit: type=1800 audit(1745043798.322:653): pid=21175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3163" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1977.809759][ T5847] Bluetooth: hci8: command 0x0c1a tx timeout [ 1977.809950][T15870] Bluetooth: hci3: command 0x0c1a tx timeout [ 1979.451830][T21193] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1979.463713][T21193] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1981.493405][T20867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1982.023675][T21206] Invalid ELF header magic: != ELF [ 1982.223403][T12995] IPVS: starting estimator thread 0... [ 1982.865774][T21209] IPVS: using max 26 ests per chain, 62400 per kthread [ 1982.960813][ T6741] hsr_slave_0: left promiscuous mode [ 1983.757976][ T6741] hsr_slave_1: left promiscuous mode [ 1984.270468][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1984.278774][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1984.304529][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1984.319846][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1984.502207][ T6741] veth1_macvtap: left promiscuous mode [ 1984.544711][ T6741] veth0_macvtap: left promiscuous mode [ 1984.568556][ T6741] veth1_vlan: left promiscuous mode [ 1984.606012][ T6741] veth0_vlan: left promiscuous mode [ 1984.888600][T21228] loop6: detected capacity change from 0 to 1024 [ 1986.885255][T21237] hfsplus: xattr searching failed [ 1986.929477][ T30] audit: type=1800 audit(1745043809.122:654): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3176" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1987.464300][T21242] loop6: detected capacity change from 0 to 256 [ 1987.712996][T21242] exfat: Deprecated parameter 'namecase' [ 1987.738506][T21242] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1990.828597][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1990.841741][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1990.850529][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1990.860739][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1990.868313][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1991.551069][ T31] INFO: task bch-reclaim/loo:19705 blocked for more than 143 seconds. [ 1991.559320][ T31] Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1991.689434][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1991.749648][ T31] task:bch-reclaim/loo state:D stack:15376 pid:19705 tgid:19705 ppid:2 task_flags:0x200040 flags:0x00004000 [ 1991.809906][ T31] Call Trace: [ 1991.844125][ T31] [ 1991.881010][ T31] __schedule+0x1b88/0x5240 [ 1991.929562][ T31] ? schedule+0x163/0x360 [ 1991.958006][ T31] ? __pfx___schedule+0x10/0x10 [ 1992.009461][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1992.069655][ T31] ? schedule+0x90/0x360 [ 1992.109031][ T31] ? schedule+0x90/0x360 [ 1992.149590][ T31] schedule+0x163/0x360 [ 1992.153782][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 1992.158555][ T31] schedule_preempt_disabled+0x13/0x30 [ 1992.179433][ T31] __mutex_lock+0x805/0x10c0 [ 1992.184062][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 1992.188842][ T31] ? bch2_journal_reclaim_thread+0x160/0x580 [ 1992.239469][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1992.245490][ T31] ? do_raw_spin_lock+0x151/0x370 [ 1992.299442][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1992.305105][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1992.319470][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1992.325135][ T31] bch2_journal_reclaim_thread+0x160/0x580 [ 1992.361042][ T31] ? bch2_journal_reclaim_thread+0x266/0x580 [ 1992.368855][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 1992.377550][ T31] kthread+0x7b9/0x940 [ 1992.382216][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 1992.388586][ T31] ? __pfx_kthread+0x10/0x10 [ 1992.393597][ T31] ? __pfx_kthread+0x10/0x10 [ 1992.398211][ T31] ? __pfx_kthread+0x10/0x10 [ 1992.403205][ T31] ? __pfx_kthread+0x10/0x10 [ 1992.407902][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1992.413962][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1992.419179][ T31] ? __pfx_kthread+0x10/0x10 [ 1992.424422][ T31] ret_from_fork+0x4d/0x80 [ 1992.428853][ T31] ? __pfx_kthread+0x10/0x10 [ 1992.433865][ T31] ret_from_fork_asm+0x1a/0x30 [ 1992.438665][ T31] [ 1992.442117][ T31] [ 1992.442117][ T31] Showing all locks held in the system: [ 1992.499836][ T31] 1 lock held by khungtaskd/31: [ 1992.504708][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 1992.537393][ T31] 3 locks held by kworker/0:2/972: [ 1992.545971][ T31] 1 lock held by dhcpcd/5499: [ 1992.559506][ T31] #0: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 1992.568719][ T31] 2 locks held by getty/5588: [ 1992.587308][ T31] #0: ffff88814d02b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1992.607871][ T31] #1: ffffc900036eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 1992.618493][ T31] 4 locks held by kworker/u8:18/6741: [ 1992.624411][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1992.635632][ T31] #1: ffffc90004817c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1992.646761][ T31] #2: ffffffff900f0a10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 1992.657986][ T31] #3: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 1992.699779][ T31] 3 locks held by kworker/u8:26/12327: [ 1992.705257][ T31] 4 locks held by kworker/u8:27/12328: [ 1992.732445][ T31] #0: ffff88806a0ff948 ((wq_completion)btree_update){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1992.756160][ T31] #1: ffffc90003697c60 ((work_completion)(&c->btree_interior_update_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1992.773643][ T31] #2: ffff888036084228 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7ed/0xd40 [ 1992.809710][ T31] #3: ffff8880360a6590 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x68a/0x16c0 [ 1992.829359][ T31] 3 locks held by kworker/u8:36/12337: [ 1992.837449][ T31] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1992.858730][ T31] #1: ffffc90003a57c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1992.870283][ T31] #2: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1992.880205][ T31] 6 locks held by syz-executor/14971: [ 1992.885587][ T31] #0: ffff88807e3a80e0 (&type->s_umount_key#126){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1992.896110][ T31] #1: ffff888036080278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xff/0x5b0 [ 1992.905793][ T31] #2: ffff8880360cad28 (&j->reclaim_lock){+.+.}-{4:4}, at: journal_flush_done+0x85/0x820 [ 1992.916035][ T31] #3: ffff888036084228 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7ed/0xd40 [ 1992.926891][ T31] #4: ffff8880360845d0 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x1aec/0x1ca0 [ 1992.938262][ T31] #5: ffff8880360a6590 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x68a/0x16c0 [ 1992.948491][ T31] 2 locks held by kworker/0:7/17429: [ 1992.953917][ T31] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1992.965707][ T31] #1: ffffc900036b7c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1992.977543][ T31] 3 locks held by kworker/u8:0/18744: [ 1992.984473][ T31] #0: ffff888030848948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1992.996544][ T31] #1: ffffc900039e7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1993.010481][ T31] #2: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1993.020057][ T31] 1 lock held by bch-reclaim/loo/19705: [ 1993.020098][ T5847] Bluetooth: hci7: command tx timeout [ 1993.025588][ T31] #0: ffff8880360cad28 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x160/0x580 [ 1993.042429][ T31] 1 lock held by syz.2.3026/20075: [ 1993.047538][ T31] #0: ffff88807e3a80e0 (&type->s_umount_key#126){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 1993.057642][ T31] 1 lock held by syz-executor/20189: [ 1993.064079][ T31] #0: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1993.073597][ T31] 1 lock held by syz-executor/20867: [ 1993.079116][ T31] #0: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 1993.089059][ T31] 2 locks held by syz-executor/20898: [ 1993.094560][ T31] #0: ffffffff90601cc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 1993.104168][ T31] #1: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 1993.113478][ T31] 1 lock held by syz.8.3160/21152: [ 1993.118591][ T31] #0: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1993.127789][ T31] 1 lock held by syz.3.3182/21256: [ 1993.133002][ T31] #0: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 1993.143952][ T31] 1 lock held by syz-executor/21258: [ 1993.149243][ T31] #0: ffffffff900fd548 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1993.158947][ T31] [ 1993.163589][ T31] ============================================= [ 1993.163589][ T31] [ 1993.172343][ T31] NMI backtrace for cpu 0 [ 1993.172362][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1993.172391][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1993.172407][ T31] Call Trace: [ 1993.172417][ T31] [ 1993.172427][ T31] dump_stack_lvl+0x241/0x360 [ 1993.172469][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1993.172506][ T31] ? __pfx__printk+0x10/0x10 [ 1993.172555][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 1993.172600][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1993.172633][ T31] ? _printk+0xd5/0x120 [ 1993.172668][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1993.172699][ T31] ? __pfx__printk+0x10/0x10 [ 1993.172739][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1993.172765][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1993.172805][ T31] watchdog+0x1058/0x10a0 [ 1993.172840][ T31] ? watchdog+0x1ea/0x10a0 [ 1993.172886][ T31] ? __pfx_watchdog+0x10/0x10 [ 1993.172919][ T31] kthread+0x7b9/0x940 [ 1993.172951][ T31] ? __pfx_watchdog+0x10/0x10 [ 1993.172985][ T31] ? __pfx_kthread+0x10/0x10 [ 1993.173011][ T31] ? __pfx_kthread+0x10/0x10 [ 1993.173040][ T31] ? __pfx_kthread+0x10/0x10 [ 1993.173068][ T31] ? __pfx_kthread+0x10/0x10 [ 1993.173096][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.173125][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1993.173150][ T31] ? __pfx_kthread+0x10/0x10 [ 1993.173181][ T31] ret_from_fork+0x4d/0x80 [ 1993.173205][ T31] ? __pfx_kthread+0x10/0x10 [ 1993.173235][ T31] ret_from_fork_asm+0x1a/0x30 [ 1993.173277][ T31] [ 1993.173287][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1993.337725][ C1] NMI backtrace for cpu 1 [ 1993.337745][ C1] CPU: 1 UID: 0 PID: 21256 Comm: syz.3.3182 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1993.337772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1993.337786][ C1] RIP: 0010:kasan_byte_accessible+0x16/0x20 [ 1993.337812][ C1] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 e9 fb 59 e3 fe 90 90 90 90 90 90 90 90 90 90 90 90 [ 1993.337831][ C1] RSP: 0018:ffffc9000ad373c0 EFLAGS: 00000216 [ 1993.337852][ C1] RAX: 0000000000000000 RBX: ffffffff8ed3df20 RCX: 0000000000000002 [ 1993.337868][ C1] RDX: 0000000000000000 RSI: ffffffff816d9be5 RDI: 1ffffffff1da7be4 [ 1993.337884][ C1] RBP: ffffffff93686020 R08: 0000000000000000 R09: 0000000000000000 [ 1993.337899][ C1] R10: dffffc0000000000 R11: ffffffff81ae6230 R12: 0000000000000000 [ 1993.337915][ C1] R13: 0000000000000002 R14: ffffffff816d9be5 R15: ffffffff8ed3df20 [ 1993.337934][ C1] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 1993.337953][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1993.337968][ C1] CR2: 000020000001b000 CR3: 000000007f3a4000 CR4: 0000000000350ef0 [ 1993.337987][ C1] Call Trace: [ 1993.337995][ C1] [ 1993.338003][ C1] __kasan_check_byte+0x14/0x40 [ 1993.338024][ C1] ? syscall_exit_to_user_mode+0xce/0x340 [ 1993.338048][ C1] lock_acquire+0x89/0x2f0 [ 1993.338082][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 1993.338118][ C1] ? syscall_exit_to_user_mode+0xce/0x340 [ 1993.338140][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 1993.338165][ C1] unwind_next_frame+0xd5/0x23b0 [ 1993.338190][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 1993.338221][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 1993.338249][ C1] ? syscall_exit_to_user_mode+0xce/0x340 [ 1993.338272][ C1] ? syscall_exit_to_user_mode+0xce/0x340 [ 1993.338296][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1993.338324][ C1] arch_stack_walk+0x11e/0x150 [ 1993.338356][ C1] ? syscall_exit_to_user_mode+0xce/0x340 [ 1993.338384][ C1] stack_trace_save+0x11a/0x1d0 [ 1993.338412][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1993.338439][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1993.338473][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1993.338508][ C1] ? __lock_acquire+0xad5/0xd80 [ 1993.338543][ C1] save_stack+0xfc/0x1f0 [ 1993.338578][ C1] ? __pfx_save_stack+0x10/0x10 [ 1993.338609][ C1] ? __free_frozen_pages+0xde8/0x10a0 [ 1993.338635][ C1] ? vfree+0x1c3/0x360 [ 1993.338657][ C1] ? kcov_close+0x28/0x50 [ 1993.338683][ C1] ? __fput+0x3eb/0x9f0 [ 1993.338705][ C1] ? task_work_run+0x253/0x310 [ 1993.338733][ C1] ? do_exit+0xa11/0x27f0 [ 1993.338758][ C1] ? do_group_exit+0x207/0x2c0 [ 1993.338784][ C1] ? get_signal+0x1696/0x1730 [ 1993.338815][ C1] ? arch_do_signal_or_restart+0x98/0x810 [ 1993.338850][ C1] ? syscall_exit_to_user_mode+0xce/0x340 [ 1993.338875][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.338903][ C1] ? page_ext_put+0x97/0xc0 [ 1993.338941][ C1] __reset_page_owner+0x76/0x1e0 [ 1993.338977][ C1] __free_frozen_pages+0xde8/0x10a0 [ 1993.339012][ C1] vfree+0x1c3/0x360 [ 1993.339042][ C1] kcov_close+0x28/0x50 [ 1993.339068][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1993.339095][ C1] __fput+0x3eb/0x9f0 [ 1993.339131][ C1] task_work_run+0x253/0x310 [ 1993.339164][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1993.339191][ C1] ? do_exit+0xa0c/0x27f0 [ 1993.339217][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.339244][ C1] ? do_exit+0xa0c/0x27f0 [ 1993.339273][ C1] do_exit+0xa11/0x27f0 [ 1993.339305][ C1] ? do_raw_spin_lock+0x151/0x370 [ 1993.339333][ C1] ? __pfx_do_exit+0x10/0x10 [ 1993.339359][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1993.339404][ C1] do_group_exit+0x207/0x2c0 [ 1993.339432][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.339458][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 1993.339483][ C1] get_signal+0x1696/0x1730 [ 1993.339527][ C1] ? __pfx_get_signal+0x10/0x10 [ 1993.339560][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.339585][ C1] ? __phys_addr+0xba/0x170 [ 1993.339619][ C1] arch_do_signal_or_restart+0x98/0x810 [ 1993.339657][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1993.339691][ C1] ? task_work_run+0x2c9/0x310 [ 1993.339729][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.339758][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1993.339784][ C1] do_syscall_64+0x100/0x210 [ 1993.339809][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.339837][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.339858][ C1] RIP: 0033:0x7fa2b818e169 [ 1993.339876][ C1] Code: Unable to access opcode bytes at 0x7fa2b818e13f. [ 1993.339888][ C1] RSP: 002b:00007fff48d6f9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1993.339910][ C1] RAX: 0000000000000000 RBX: 00007fa2b83b7ba0 RCX: 00007fa2b818e169 [ 1993.339926][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1993.339939][ C1] RBP: 00007fa2b83b7ba0 R08: 000000000001b574 R09: 0000001a48d6fcef [ 1993.339956][ C1] R10: 00007fa2b83b7ac0 R11: 0000000000000246 R12: 00000000001e6242 [ 1993.339971][ C1] R13: 00007fa2b83b6160 R14: ffffffffffffffff R15: 00007fff48d6fb10 [ 1993.340001][ C1] [ 1993.916244][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1993.923113][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1993.934927][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1993.944980][ T31] Call Trace: [ 1993.948253][ T31] [ 1993.951177][ T31] dump_stack_lvl+0x241/0x360 [ 1993.955874][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1993.961079][ T31] ? __pfx__printk+0x10/0x10 [ 1993.965680][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1993.971312][ T31] ? vscnprintf+0x5d/0x90 [ 1993.975650][ T31] panic+0x349/0x880 [ 1993.979547][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1993.984934][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1993.991098][ T31] ? __pfx_panic+0x10/0x10 [ 1993.995513][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1994.000887][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1994.006537][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1994.012170][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1994.017542][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1994.023701][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1994.029870][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1994.035500][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1994.041660][ T31] watchdog+0x1097/0x10a0 [ 1994.045999][ T31] ? watchdog+0x1ea/0x10a0 [ 1994.050423][ T31] ? __pfx_watchdog+0x10/0x10 [ 1994.055105][ T31] kthread+0x7b9/0x940 [ 1994.059176][ T31] ? __pfx_watchdog+0x10/0x10 [ 1994.063855][ T31] ? __pfx_kthread+0x10/0x10 [ 1994.068447][ T31] ? __pfx_kthread+0x10/0x10 [ 1994.073038][ T31] ? __pfx_kthread+0x10/0x10 [ 1994.077627][ T31] ? __pfx_kthread+0x10/0x10 [ 1994.082215][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1994.087851][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1994.093059][ T31] ? __pfx_kthread+0x10/0x10 [ 1994.097652][ T31] ret_from_fork+0x4d/0x80 [ 1994.102064][ T31] ? __pfx_kthread+0x10/0x10 [ 1994.106655][ T31] ret_from_fork_asm+0x1a/0x30 [ 1994.111433][ T31] [ 1994.114654][ T31] Kernel Offset: disabled [ 1994.118975][ T31] Rebooting in 86400 seconds..